Privacy

Last updated 18 August 2026. Operator: Hax Corporation.

What MyCalTracker is

MyCalTracker is a photo calorie tracker operated by Hax Corporation. You photograph meals and leftovers, confirm grams, and we store that diary so you can see calories and macros.

Data we collect

• Account email, name, and password hash.
• Meal photos you upload, leftover photos, and the foods you confirm.
• Profile targets such as daily calories, protein, date of birth, and timezone.
• Weight and water entries you log.
• AI Coach chat messages you send.
• A visitor cookie only if you allow visit stats, so unique visits can be counted in admin.

How we use it

Meal and leftover photos are sent to OpenAI (vision models hosted by OpenAI, typically in the United States) so MyCalTracker can name foods on the plate. OpenAI receives the JPEG for identification. It does not receive your password. Nutrition values come from USDA FoodData Central after you confirm grams. We use your diary to show remaining calories, leftover subtractions, and a weekly review on Premium. If you agree at sign-up, we may email offers, news, and product updates.

Who sees it

We do not sell your meal photos. Processors we rely on: OpenAI for photo identification, USDA FoodData Central for nutrition lookups, SMTP email delivery, file storage on this host, and Paddle for payments. Paddle does not receive your meal photos. OpenAI's processing is required to identify food from a photograph.

Retention

Confirmed meal data stays until you delete the account. Plate JPEGs are temporary. They are removed after a leftover photo, a No Leftovers tap, or when they pass the photo retention window. Server logs are short-lived operational records, not a second copy of your meals. Account deletion is requested on Account. Sign in within 30 days to keep the account. After that window we keep the data until an operator completes deletion.

Your choices

Sign in to edit or delete meals. On Account you can download a full copy of your diary (GDPR access) and schedule deletion. Privacy questions and access requests: haxcorporation@gmail.com.

Cookies

Essential: an HTTP-only session cookie so you stay signed in, and a guest-scan cookie so the free plate photo is one per device. Optional: a visitor cookie (mct_vid) that counts unique visits in our admin stats. We do not run advertising cookies. You can keep essential cookies only from the banner on first visit.

Questions: haxcorporation@gmail.com, or the contact form on the home page.